init: CasSsoService CAS 5.3 overlay (cas.war via LFS)

2026-08-05 09:53:49 +08:00
commit 3bd14554ec
93 changed files with 19827 additions and 0 deletions
@@ -0,0 +1,85 @@
+COPIED_OK
+
+local war size: 173751847
+
+=== RUNNING WAR LoginController features ===
+has window.location.href (v1.8 success): True
+has sendRedirect (error path): True
+has text/html (v1.8 success): True
+
+=== RUNNING WAR index.html ===
+has action=/api/login: True
+has ?v=1.8: True
+has name=username: True
+
+=== container filesystem: any default-redirect-url? ===
+---env---
+
+
+=== effective cas.properties (head) ===
+# CAS prod config (managed in nacos, dataId=cas-prod.properties, group=CAS, namespace=cas)
+# 去掉 /cas 上下文路径，对外域名走 sso.yunhaixingtong.com
+cas.server.name: http://sso.yunhaixingtong.com
+cas.server.prefix: http://sso.yunhaixingtong.com
+
+cas.adminPagesSecurity.ip: 127\.0\.0\.1
+
+logging.config: file:/etc/cas/config/log4j2.xml
+
+server.port: 8443
+server.context-path: /
+server.ssl.enabled: true
+server.ssl.key-store: /etc/cas/cas.keystore
+server.ssl.key-store-password: changeit
+server.ssl.key-password: changeit
+server.ssl.key-alias: cas
+
+# TGC 经 caddy(HTTP) 透传，关闭 Secure 以便浏览器在 http 下也能存 cookie
+cas.tgc.secure: false
+# 上下文路径已改为 /，cookie 作用域必须同步为 /，否则 SSO 票据校验拿不到 TGC
+cas.tgc.path: /
+
+# ===== 数据库认证（自定义 DbAuthenticationHandler 读取）=====
+cas.authn.jdbc.query[0].sql: select * from sys_user where username=?
+cas.authn.jdbc.query[0].url: jdbc:mysql://mysql:3306/cas?useUnicode=true&characterEncoding=utf8&useSSL=false&serverTimezone=Asia/Shanghai&allowPublicKeyRetrieval=true
+cas.authn.jdbc.query[0].user: cas
+cas.authn.jdbc.query[0].password: Cas@123456
+cas.authn.jdbc.query[0].driverClass: com.mysql.jdbc.Driver
+cas.authn.jdbc.query[0].fieldPassword: password
+cas.authn.jdbc.query[0].fieldDisabled: disabled
+cas.authn.jdbc.query[0].fieldExpired: expired
+cas.authn.jdbc.query[0].url=jdbc:mysql://mysql8:3306/bsch_userbase?useUnicode=true&characterEncoding=utf8&useSSL=false&serverTimezone=Asia/Shanghai&allowPublicKeyRetrieval=true
+cas.authn.jdbc.query[0].user=root
+cas.authn.jdbc.query[0].password=CVf^x$sW*b6CGHxh
+cas.authn.jdbc.query[0].driverClass=com.mysql.jdbc.Driver
+spring.redis.host=redis-server
+spring.redis.port=6379
+spring.redis.password=wv&WcDYAmLtqTIGM
+spring.redis.database=0
+spring.redis.timeout=5000
+spring.redis.ssl=false
+spring.redis.jedis.pool.max-active=8
+spring.redis.jedis.pool.max-idle=8
+spring.redis.jedis.pool.min-idle=0
+spring.redis.jedis.pool.max-wait=3000
+spring.rabbitmq.host=rabbitmq
+spring.rabbitmq.port=5672
+spring.rabbitmq.username=admin
+spring.rabbitmq.password=JdU29I#Q2E4yXoUl
+spring.rabbitmq.virtual-host=/
+
+
+=== JDBC url in container ===
+cas.authn.jdbc.query[0].sql: select * from sys_user where username=?
+cas.authn.jdbc.query[0].url: jdbc:mysql://mysql:3306/cas?useUnicode=true&characterEncoding=utf8&useSSL=false&serverTimezone=Asia/Shanghai&allowPublicKeyRetrieval=true
+cas.authn.jdbc.query[0].user: cas
+cas.authn.jdbc.query[0].password: Cas@123456
+cas.authn.jdbc.query[0].driverClass: com.mysql.jdbc.Driver
+cas.authn.jdbc.query[0].fieldPassword: password
+cas.authn.jdbc.query[0].fieldDisabled: disabled
+cas.authn.jdbc.query[0].fieldExpired: expired
+cas.authn.jdbc.query[0].url=jdbc:mysql://mysql8:3306/bsch_userbase?useUnicode=true&characterEncoding=utf8&useSSL=false&serverTimezone=Asia/Shanghai&allowPublicKeyRetrieval=true
+cas.authn.jdbc.query[0].user=root
+cas.authn.jdbc.query[0].password=CVf^x$sW*b6CGHxh
+cas.authn.jdbc.query[0].driverClass=com.mysql.jdbc.Driver
+